How Many Questions Of 156-315.80 Preparation

NEW QUESTION 1
You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) ______ or _______ action for the file types.

• A. Inspect/Bypass
• B. Inspect/Prevent
• C. Prevent/Bypass
• D. Detect/Bypass

Answer: A

NEW QUESTION 2
After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

• A. Security Gateway IP-address cannot be changed without re-establishing the trust.
• B. The Security Gateway name cannot be changed in command line without re-establishing trust.
• C. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust.
• D. The Security Management Server IP-address cannot be changed without re-establishing the trust.

Answer: A

NEW QUESTION 3
Which firewall daemon is responsible for the FW CLI commands?

• A. fwd
• B. fwm
• C. cpm
• D. cpd

Answer: A

NEW QUESTION 4
Which remote Access Solution is clientless?

• A. Checkpoint Mobile
• B. Endpoint Security Suite
• C. SecuRemote
• D. Mobile Access Portal

Answer: D

NEW QUESTION 5
In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Stateful Mode configuration, chain modules marked with
_______ will not apply.

• A. ffff
• B. 1
• C. 3
• D. 2

Answer: D

NEW QUESTION 6
Check Point security components are divided into the following components:

• A. GUI Client, Security Gateway, WebUI Interface
• B. GUI Client, Security Management, Security Gateway
• C. Security Gateway, WebUI Interface, Consolidated Security Logs
• D. Security Management, Security Gateway, Consolidate Security Logs

Answer: B

NEW QUESTION 7
Vanessa is firewall administrator in her company. Her company is using Check Point firewall on a central and several remote locations which are managed centrally by R77.30 Security Management Server. On central location is installed R77.30 Gateway on Open server. Remote locations are using Check Point UTM-1570 series appliances with R75.30 and some of them are using a UTM-1-Edge-X or Edge-W with latest available firmware. She is in process of migrating to R80.
What can cause Vanessa unnecessary problems, if she didn’t check all requirements for migration to R80?

• A. Missing an installed R77.20 Add-on on Security Management Server
• B. Unsupported firmware on UTM-1 Edge-W appliance
• C. Unsupported version on UTM-1 570 series appliance
• D. Unsupported appliances on remote locations

Answer: A

NEW QUESTION 8
What is the purpose of Priority Delta in VRRP?

• A. When a box up, Effective Priority = Priority + Priority Delta
• B. When an Interface is up, Effective Priority = Priority + Priority Delta
• C. When an Interface fail, Effective Priority = Priority – Priority Delta
• D. When a box fail, Effective Priority = Priority – Priority Delta

Answer: C

Explanation:
Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP.
If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet.
Once the master sees this packet with a priority greater than its own, then it releases the VIP. References:

NEW QUESTION 9
Under which file is the proxy arp configuration stored?

• A. $FWDIR/state/proxy_arp.conf on the management server
• B. $FWDIR/conf/local.arp on the management server
• C. $FWDIR/state/_tmp/proxy.arp on the security gateway
• D. $FWDIR/conf/local.arp on the gateway

Answer: D

NEW QUESTION 10
You can access the ThreatCloud Repository from:

• A. R80.10 SmartConsole and Application Wiki
• B. Threat Prevention and Threat Tools
• C. Threat Wiki and Check Point Website
• D. R80.10 SmartConsole and Threat Prevention

Answer: D

NEW QUESTION 11
What is the default shell for the command line interface?

• A. Expert
• B. Clish
• C. Admin
• D. Normal

Answer: B

Explanation:
The default shell of the CLI is called clish

NEW QUESTION 12
You are asked to check the status of several user-mode processes on the management server and gateway. Which of the following processes can only be seen on a Management Server?

• A. fwd
• B. fwm
• C. cpd
• D. cpwd

Answer: B

NEW QUESTION 13
With SecureXL enabled, accelerated packets will pass through the following:

• A. Network Interface Card, OSI Network Layer, OS IP Stack, and the Acceleration Device
• B. Network Interface Card, Check Point Firewall Kernal, and the Acceleration Device
• C. Network Interface Card and the Acceleration Device
• D. Network Interface Card, OSI Network Layer, and the Acceleration Device

Answer: C

NEW QUESTION 14
How many layers make up the TCP/IP model?

• A. 2
• B. 7
• C. 6
• D. 4

Answer: D

NEW QUESTION 15
VPN Link Selection will perform the following when the primary VPN link goes down?

• A. The Firewall will drop the packets.
• B. The Firewall can update the Link Selection entries to start using a different link for the same tunnel.
• C. The Firewall will send out the packet on all interfaces.
• D. The Firewall will inform the client that the tunnel is down.

Answer: B

NEW QUESTION 16
Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enabled which path is handling the traffic?

• A. Slow Path
• B. Medium Path
• C. Fast Path
• D. Accelerated Path

Answer: A

NEW QUESTION 17
What are the two high availability modes?

• A. Load Sharing and Legacy
• B. Traditional and New
• C. Active and Standby
• D. New and Legacy

Answer: D

Explanation:
ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages.

NEW QUESTION 18
......